$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14E95DB6008E11EF8A421558C4F9AE02.roa File: 14E95DB6008E11EF8A421558C4F9AE02.roa (raw, json) Hash identifier: hjCXmAXjdRGbQlizraFfgvYq2+1KrnkZ+B7TMdpwL1M= Subject key identifier: E6:63:4B:4C:D2:57:B3:6E:6C:41:5F:B5:D0:9E:40:D3:1E:9A:BD:87 Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Certificate serial: B8FD Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14E95DB6008E11EF8A421558C4F9AE02.roa Signing time: Thu 08 May 2025 16:26:44 +0000 ROA not before: Thu 08 May 2025 16:26:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 151126 IP address blocks: 103.133.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 15:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47357 (0xb8fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823 Validity Not Before: May 8 16:26:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681cdb44-3f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9c:52:0a:f9:65:84:93:b8:8d:4f:ed:e6:56: 1b:de:72:d7:ac:76:00:cf:b2:31:7d:23:d6:9c:a1: b5:4a:ec:16:28:2c:de:5f:50:42:e2:99:d7:26:ff: be:2b:31:a7:a3:cc:66:fd:73:a1:8d:b2:04:78:66: 59:78:b4:41:b7:65:68:29:e2:a0:ef:49:d1:ad:8d: b0:cd:05:56:39:8b:1d:f7:27:7e:68:0b:69:54:f9: c3:e6:9b:71:05:65:ac:f4:9d:08:81:28:98:2f:19: aa:3a:ee:01:50:91:75:7d:a6:8c:f2:b3:3c:43:10: 2b:a5:61:0c:37:19:85:20:9b:80:e0:a5:6c:95:9c: 2d:81:08:62:4c:32:43:b5:1c:6f:c4:7d:bb:92:0e: 9c:08:40:ce:09:bb:cc:90:0f:c1:1b:39:16:45:5c: bf:11:73:9c:73:c6:ed:e6:46:cb:dc:4a:2f:f9:bf: 09:10:cf:b7:6c:fd:50:2b:1b:c5:75:66:3f:04:75: 37:40:41:0d:b4:32:80:6e:a1:df:35:eb:96:0f:bb: 6d:c3:82:45:53:f8:f0:0c:0c:04:28:b8:b9:ff:ff: 99:43:0f:6a:6d:4e:90:e9:3a:72:5e:6d:b5:87:b3: f0:28:64:49:d1:12:2e:3e:cb:75:e7:7c:05:bb:ff: 95:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:63:4B:4C:D2:57:B3:6E:6C:41:5F:B5:D0:9E:40:D3:1E:9A:BD:87 X509v3 Authority Key Identifier: keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/14E95DB6008E11EF8A421558C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.133.156.0/23 Signature Algorithm: sha256WithRSAEncryption 48:39:2e:00:48:1f:81:19:1a:e5:b0:9b:6e:b5:2b:7e:d6:de: 39:41:88:8c:3f:0a:01:18:35:e1:b7:b7:19:3d:cf:04:78:a8: 21:10:31:00:86:67:20:d0:e0:de:eb:80:0b:d3:59:dd:dc:6f: 6b:e9:97:5f:f1:8f:33:53:bb:b9:2d:54:73:cf:32:91:41:0a: e6:cb:37:a0:9a:cc:f4:32:9a:9f:62:ca:e9:29:0b:29:62:3b: 4c:48:08:24:bb:27:98:67:eb:56:e3:9b:c6:f7:2b:8f:e9:14: 7e:15:cc:01:25:ab:88:77:38:11:a8:0b:45:c5:16:f3:45:cf: 6f:60:3c:52:c7:5e:36:32:e4:5b:10:53:44:66:23:a4:50:3d: 91:b3:55:94:9f:9d:45:60:fd:ce:0f:3e:19:8e:28:be:b3:07: 85:c3:76:16:fd:22:dd:6b:69:c6:f0:00:4a:50:75:b6:46:31: ea:85:60:75:e8:e2:6f:d4:70:ea:ad:d3:39:f8:84:45:d2:e7: 79:73:b6:16:2b:4f:01:cd:3d:87:ec:81:fa:65:a0:4e:af:65: 99:f3:72:6a:c0:a7:bc:62:12:8e:35:8d:ee:cb:52:f4:a1:d0: 11:75:86:ac:49:8b:49:78:d1:e0:1f:0c:b2:82:2c:fa:19:04: 45:23:42:59 -----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIDALj9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5 MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4 M0UzQUJDODIzMB4XDTI1MDUwODE2MjY0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG A1UEAxMNNjgxY2RiNDQtM2YyNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOcUgr5ZYSTuI1P7eZWG95y16x2AM+yMX0j1pyhtUrsFigs3l9QQuKZ1yb/ visxp6PMZv1zoY2yBHhmWXi0QbdlaCnioO9J0a2NsM0FVjmLHfcnfmgLaVT5w+ab cQVlrPSdCIEomC8ZqjruAVCRdX2mjPKzPEMQK6VhDDcZhSCbgOClbJWcLYEIYkwy Q7Ucb8R9u5IOnAhAzgm7zJAPwRs5FkVcvxFznHPG7eZGy9xKL/m/CRDPt2z9UCsb xXVmPwR1N0BBDbQygG6h3zXrlg+7bcOCRVP48AwMBCi4uf//mUMPam1OkOk6cl5t tYez8ChkSdESLj7Lded8Bbv/lR8CAwEAAaOCApUwggKRMB0GA1UdDgQWBBTmY0tM 0lezbmxBX7XQnkDTHpq9hzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3 MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3 MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB /wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5 MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE0RTk1REI2 MDA4RTExRUY4QTQyMTU1OEM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6 Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/ BBAwDjAMBAIAATAGAwQBZ4WcMA0GCSqGSIb3DQEBCwUAA4IBAQBIOS4ASB+BGRrl sJtutSt+1t45QYiMPwoBGDXht7cZPc8EeKghEDEAhmcg0ODe64AL01nd3G9r6Zdf 8Y8zU7u5LVRzzzKRQQrmyzegmsz0MpqfYsrpKQspYjtMSAgkuyeYZ+tW45vG9yuP 6RR+FcwBJauIdzgRqAtFxRbzRc9vYDxSx142MuRbEFNEZiOkUD2Rs1WUn51FYP3O Dz4Zjii+sweFw3YW/SLda2nG8ABKUHW2RjHqhWB16OJv1HDqrdM5+IRF0ud5c7YW K08BzT2H7IH6ZaBOr2WZ83JqwKe8YhKONY3uy1L0odARdYasSYtJeNHgHwyygiz6 GQRFI0JZ -----END CERTIFICATE-----Generated at Sat May 17 01:19:49 2025 by rpki-client